Support Ticket System For Woocommerce Vulnerabilities

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.1.2

Fixed in:

2.1.3

Disclosed:

Mar 23, 2026

CVE-2026-23977 on NVD →

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.1.1. This makes it possible for authenticated attackers, with contributor-level access and above, to perform an unauthorized ac...

CVSS:

5.4

Affected:

up to 2.1.1

Fixed in:

2.1.2

Disclosed:

Sep 22, 2025

CVE-2025-57972 on NVD →

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make rem...

CVSS:

9.8

Affected:

up to 2.1.0

Fix:

No patched version reported

Disclosed:

Jul 11, 2025

CVE-2025-60235 on NVD →